CVE-2017-11576

Name of the Vulnerable Software and Affected Versions FontForge version 20161012

Description The issue arises from a failure to ensure a positive size in a weight vector memcpy call in the readcfftopdict function, located in parsettf.c. This can lead to a denial of service (DoS) when a crafted otf file is processed.

Recommendations For FontForge version 20161012, consider updating to a newer version that addresses this issue, as the current version does not properly validate input, leading to potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.